Linux Distros Unpatched Vulnerability : CVE-2026-40527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2...

CVE-2026-40527

radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...

CVE-2026-40527

radare2 prior to commit bc5a890 contains a local command-injection in the afsv/afsvj path. crafted ELF binaries can embed shell commands in DWARF DW_TAG_formal_parameter names; when radare2 analyzes the binary with aaa and subsequently runs afsvj, the unsanitized parameter interpolation in the pf...

PT-2026-33515

Name of the Vulnerable Software and Affected Versions radare2 versions prior to commit bc5a890 Description An issue exists in the 'afsv/afsvj' command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW TAG formal parameter names. When the software analyzes a bina...